IBM_SECURITY_RUNTIME events (Runtime start)

Edit online

This event type is generated when the runtime is started.

The following table lists the elements that can be shown in the output of an IBM_SECURITY_RUNTIME event.

Table 1. Elements for an IBM_SECURITY_RUNTIME event

Elements for an IBM_SECURITY_RUNTIME event
Element Description
Domain
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='Domain']/values
IsMgmtAudit
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='IsMgmtAudit']/values
nameInApp
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='resourceInfo']/children
[@name='nameInApp']/values
nameInPolicy
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='resourceInfo']/children
[@name='nameInPolicy']/values
type
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='resourceInfo']/children
[@name='type']/values
uniqueID
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='resourceInfo']/children
[@name='uniqueID']/values
action
The XPath is:
CommonBaseEvent/extendedDataElements
[@name='action']/values

Samples of IBM_SECURITY_RUNTIME events

The following example shows an events generated by a runtime request. 
<CommonBaseEvent 
  creationTime="2016-09-20T03:45:55.838Z" 
  extensionName="IBM_SECURITY_RUNTIME" 
  globalInstanceId="FIM45b338ad015712f2ad5cd6c9d3998" 
  sequenceNumber="0" version="1.1">
<contextDataElements 
  name="Security Event Factory" 
  type="eventTrailId">
  <contextId>FIM_45b337ec01571ef29f4cd6c9d3998025+1092518090</contextId>
</contextDataElements>
<extendedDataElements name="Domain" type="string">
  <values>Not Available</values>
</extendedDataElements>
<extendedDataElements name="IsMgmtAudit" type="boolean">
  <values>false</values>
</extendedDataElements>
<extendedDataElements name="action" type="string">
  <values>auditStart</values>
</extendedDataElements>
<extendedDataElements name="resourceInfo" type="noValue">
  <children name="nameInApp" type="string"><values></values>
  </children>
  <children name="nameInPolicy" type="string"><values></values>
  </children>
  <children name="type" type="string"><values>application</values>  
  </children>
  <children name="uniqueId" type="long"><values>0</values>
  </children>
</extendedDataElements>
<extendedDataElements name="outcome" type="noValue">
  <children name="result" type="string"><values>SUCCESSFUL</values>
  </children>
  <children name="majorStatus" type="int"><values>0</values>
  </children>
</extendedDataElements>
<sourceComponentId 
  application="IBM® Verify Identity Access" 
  component="Authentication and Federated Identity" 
  componentIdType="ProductName" 
  executionEnvironment="Linux[amd64]#2.6.32-279.14.1.91.iss7_3.x86_64" 
  location="isam.myidp.ibm.com" 
  locationType="FQHostname" 
  subComponent="com.tivoli.am.fim.audit.event.impl.RuntimeAuditAdapterImpl" 
  threadId="Default Executor-thread-10" 
  componentType="http://www.ibm.com/namespaces/autonomic/Tivoli_componentTypes"/>
<situation categoryName="ReportSituation">
  <situationType xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
    xsi:type="ReportSituation" 
    reasoningScope="INTERNAL" 
    reportCategory="SECURITY"/>
  </situation>
</CommonBaseEvent>